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IN THE CLAIMS: 
Amended claims follow: 

1 . (Currently Amended) A method for accelerated scanning, comprising: 

(a) identifying a file access pattern associated with data; 

(b) reading the data based on the file access pattern; and 

(c) performing a virus scan on the data; 

wherein the data is read and scanned by executing a first thread of operat ion for reading 
the data and a second thread of operation for scanning the data: 

wherein the first thread of operation is executed in parallel with the second t hread such 
that while a first portion of the data is being scanned, a second portion of th e data to be 
scanned is being read and cached, so that, when a scanner is available for sc anning the 
second portion of the data, a delay associated with reading the second portion of the data 
is avoided . 

2. (Original) The method as recited in claim 1 , wherein if it is determined that the 
data does not have the associated file access pattern, the data is read and a file access 
pattern associated with the file is generated and stored. 

3. (Original) The method as recited in claim 1 , wherein if it is determined that the 
data does not have the associated file access pattern, the data is read and the virus scan is 
performed, after which it is determined whether the virus scan was slower than a 
predetermined amount. 

4. (Original) The method as recited in claim 3, wherein the file access pattern is 
conditionally generated based on whether the virus scan was slower than the 
predetermined amount. 

5. (Original) The method as recited in claim 1, wherein the file access pattern 
includes a file location. 
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6. (Original) The method as recited in claim 1 , wherein the file access pattern 
includes a data amount. 

7. (Cancelled) 

8. (Currently Amended) The method as recited in claim [7]i, wherein the first thread 
of operation includes retrieving the file access pattern, reading the data based on the file 
access pattern, and caching the data. 

9. (Original) The method as recited in claim 8, wherein the second thread of 
operation includes determining whether the file access pattern is valid, and reading the 
data from the cache if it is determined that the file access pattern is valid. 

10. (Original) The method as recited in claim 8, wherein the second thread of 
operation includes determining whether the data is available for being read from the 
cache, and reading the data if the data is available for being read from the cache. 

1 1 . (Original) The method as recited in claim 1 , and further comprising determining 
whether the file access pattern is invalid. 

12. (Original) The method as recited in claim 1 1 , and further comprising deleting the 
file access pattern if the file access pattern is determined to be invalid. 

13. (Original) The method as recited in claim 12, and further comprising reading the 
data and generating a file access pattern associated with the file if the file access pattern 
is deleted. 

14. (Currently Amended) A computer program product for accelerated scanning, 
comprising: 

(a) computer code for identifying a file access pattern associated with data; 
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(b) computer code for reading the data based on the file access pattern; and 

(c) computer code for performing a virus scan on the data; 

wherein the data is read and scanned by executing a first thread of operation for reading 
the data and a second thread of operation for scanning the data; 

wherein the first thread of operation is executed in parallel with the second thread such 
that, while a first portion of the data is being scanned, a second portion of the data to be 
scanned is being read and cached, so that when a scanner is available for scanning the 
second portion of the data, a delay associated with reading the second portion of the data 
is avoided . 

15. (Original) The computer program product as recited in claim 14, wherein if it is 
determined that the data does not have the associated file access pattern, the data is read 
and a file access pattern associated with the file is generated and stored. 

16. (Original) The computer program product as recited in claim 14, wherein if it is 
determined that the data does not have the associated file access pattern, the data is read 
and the virus scan is performed, after which it is determined whether the virus scan was 
slower than a predetermined amount. 

17. (Original) The computer program product as recited in claim 16, wherein the file 
access pattern is conditionally generated based on whether the virus scan was slower than 
the predetermined amount. 

18. (Original) The computer program product as recited in claim 14, wherein the file 
access pattern includes a file location. 

19. (Original) The computer program product as recited in claim 14, wherein the file 
access pattern includes a data amount. 

20. (Cancelled) 
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21 . (Currently Amended) The computer program product as recited in claim [20] 14, 
wherein the first thread of operation includes retrieving the file access pattern, reading the 
data based on the file access pattern, and caching the data 

22. (Original) The computer program product as recited in claim 21, wherein the 
second thread of operation includes determining whether the file access pattern is valid, 
and reading the data from the cache if it is determined that the file access pattern is valid. 

23 . (Original) The computer program product as recited in claim 2 1 , wherein the 
second thread of operation includes determining whether the data is available for being 
read from the cache, and reading the data if the data is available for being read from the 
cache. 

24. (Original) The computer program product as recited in claim 14, and further 
comprising computer code for determining whether the file access pattern is invalid. 

25. (Original) The computer program product as recited in claim 24, and further 
comprising computer code for deleting the file access pattern if the file access pattern is 
determined to be invalid. 

26. (Original) The computer program product as recited in claim 25, and further 
comprising computer code for reading the data and generating a file access pattern 
associated with the file if the file access pattern is deleted. 

27. (Currently Amended) A system for accelerated scanning, comprising: 

(a) logic for identifying a file access pattern associated with data; 

(b) logic for reading the data based on the file access pattern; and 

(c) logic for performing a scan on the data; 

wherein the data is read and scanned bv executing a first thread of operation for reading 
the data and a second thread of operation for scanning the data: 



PACE 8/17 ■ RCVD AT 8/2/2005 5:50:34 PM [Eastern Daylight Time] ■ SVR:USPTO-EFXRF-6/24 ■ DNI8:2738300 » C8ID:408 971 4660 • DURATION (mm-ss): 05-26 



r.n 



Rug 02 05 02:53p SVIPG 



408 971 4GG0 



-6- 

wherein the first thread of operation is executed in parallel with the second thread such 
that while a first portion of the data is being scanned, a second portion of the data to be 
scanned is being read and cached, so that when a scanner is available for scanning the 
second portion of the data, a delay associated with reading the second portion of the data 
is avoided . 

28. (Currently Amended) A method for accelerated scanning, comprising: 

(a) reading data during a first thread of operation, wherein the data is cached during 
the first thread of operation; and 

(b) performing a virus scan on the data during a second thread of operation running in 
parallel with the first thread of operation, wherein the data is read from the cache during 
the second thread of operation; 

wherein while a first portion of the data is being scanned, a second portion of the data to 
be scanned is being read and cached, so that, when a scanner is available for scanning the 
second portion of the data, a delay associated with reading the second portion of the data 
is avoided . 

29. (Currently Amended) A method for accelerated scanning, comprising: 

(a) identifying data on a hard disk to be scanned for viruses; 

(b) reading the data from the hard disk; and 

(c) caching the scanned data for accelerating a virus scanning process involving the 
data; 

wherein the data is read and scanned by executing a first thread of operation for reading 
the data and a second thread of operation for scanning the data; 

wherein the first thread of operation is executed in parallel with the second thread such 
that, while a first portion of the data is being scanned, a second portion of the data to be 
scanned is being read and cached, so that, when a scanner is available for scanning the 
second portion of the data, a delay associated with reading the second portion of the data 
is avoided. 
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30. (Currently Amended) A method for reducing delay associated with reading data 
from memory during a scan, comprising: 



(a) 


initiating a scan; 


(b) 


identifying a file to be scanned during the scan; 


(c) 


determining whether the file has a file access pattern associated therewith; 


(d) 


if it is determined that the file does not have the associated file access pattern, 


(i) 


reading the data from the file, 


(ii) 


scanning the data, 


(iii) 


identifying a file access pattern associated with the file, and 


(iv) 


storing the file access pattern; 


(e) 


if it is determined that the file has the associated file access pattern, executing 



first thread of operation and a second thread of operation, the first thread of operation 
including: 

(i) retrieving the file access pattern, 

(ii) identifying a file location and data amount of the file access pattern, 

(iii) reading data from the file associated with the identified file location and 
data amount, 

(iv) caching the data, and 

(iv) repeating (ii)-(iv); and 

(f) said second thread of operation including: 

(i) determining whether the file location and data amount are valid, 
(ii) deleting at least a portion of the file access pattern associated with the file if it is 
determined that the file location and data amount are not valid, 

(iii) determining whether the data is available for being read from the cache, 

(iv) reading the data from the cache if it is determined that the file location and data 
amount are valid, and the data is available for being read from the cache, and 

(v) scanning the datai 

wherein the first thread of operation is executed in parallel with the second t hread such 
that, while a first portion of the data is being scanned a second portion of th e data to be 
scanned is being read and cached, so that, when a scanner is available for scanning the 
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second portion of the data a delay associated with reading the second portion of the data 
is avoided . 

3 1 . (New) The method as recited in claim 1 , wherein the file access pattern is stored 
in a database including a plurality of file access patterns, each of the plurality of file 
access patterns being associated with a different set of data. 

32. (New) The method as recited in claim 1, wherein the file access pattern includes a 
checksum of a file path and a file name. 

33. (New) The method as recited in claim 1, wherein the data is stored in a cache and 
the cache is continuously monitored for determining if data is available for scanning. 

34. (New) The method as recited in claim 4 ? wherein the file access pattern is not 
generated if the virus scan was slower than a predetermined amount in order to save 
space in a file access pattern database. 

35. (New) The method as recited in claim 1 , wherein the file access pattern is stored 
in a binary format. 
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